Tenant Baselines & Secure Score · Checklist Sicurezza Microsoft 365

Skillplan M365 Checklist

2026-07-20 19:30

Avanzamento valutazione 0 / 136 elementi 0%

Conformità finora 0 / 0 controlli 0%

Define a Microsoft Secure Score target appropriate for your industry and review the score monthly.

Disable Security Defaults only after equivalent Conditional Access policies are deployed and verified.

Restrict who can register applications (User Settings → App registrations = No, unless required).

Restrict user consent so that permissions requiring consent are granted by admins only.

Enforce self-service password reset only with strong registered authentication methods.

Configure the Tenant Allow/Block List to centrally manage permitted and blocked senders, URLs, and files.

Enable Customer Lockbox to require explicit approval for Microsoft engineer access to tenant data.

Block users from creating Microsoft 365 groups unless explicitly authorized via group membership.